← Back to search

@stripe/mcp

GitHub Actions Scanned 3d ago

A command line tool for setting up Stripe MCP server

npm ↗
? Not scanned yet

Versions

No versions found.

Tools 0

No tools indexed yet.

Permissions 5

network medium
Server uses network capabilities via: fetch(), requests, urllib
filesystem low
Server uses filesystem capabilities via: fs, open(), os, path
shell high
Server uses shell capabilities via: child_process, execSync()
database medium
Server uses database capabilities via: sqlite3
env_vars low
Server uses env_vars capabilities via: os.environ, os.getenv(), process.env

Scan Findings 121

medium
Excessive dependency count: 177 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: drizzle-orm@0.43.1 (GHSA-gpj5-g38j-94v9) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.12 (GHSA-267c-6grr-h53f) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.12 (GHSA-26hh-7cqf-hhc6) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.12 (GHSA-36qx-fr4f-26g5) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.12 (GHSA-3g8h-86w9-wvmq) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.12 (GHSA-3x4c-7xq6-9pq8) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.12 (GHSA-4633-3j49-mh5q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.12 (GHSA-492v-c6pp-mqqv) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.12 (GHSA-4c39-4ccg-62r3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.12 (GHSA-68g3-v927-f742) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.12 (GHSA-89xv-2m56-2m9x) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.12 (GHSA-8h8q-6873-q5fj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.12 (GHSA-955p-x3mx-jcvp) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.12 (GHSA-c4j6-fc7j-m34r) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.12 (GHSA-ffhc-5mcf-pf4q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.12 (GHSA-ggv3-7p47-pfv8) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.12 (GHSA-gx5p-jg67-6x7h) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.12 (GHSA-h64f-5h5j-jqjh) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.12 (GHSA-m99w-x7hq-7vfj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.12 (GHSA-mg66-mrh9-m8jx) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.12 (GHSA-p9j2-gv94-2wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.12 (GHSA-q4gf-8mx6-v5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.12 (GHSA-q8wf-6r8g-63ch) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.12 (GHSA-vfv6-92ff-j949) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.12 (GHSA-wfc6-r584-vfw7) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.3 (GHSA-6g55-p6wh-862q) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.3 (GHSA-fxqj-rqcc-2cmp) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.3 (GHSA-qx2v-qp2m-jg93) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.3 (GHSA-r28c-9q8g-f849) dependency_analyzer · 95%
medium
Vulnerable dependency: body-parser@1.20.4 (GHSA-v422-hmwv-36x6) dependency_analyzer · 95%
medium
Vulnerable dependency: mongoose@6.13.6 (GHSA-664h-wqgq-64gw) dependency_analyzer · 95%
medium
Vulnerable dependency: mongoose@6.13.6 (GHSA-wpg9-53fq-2r8h) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.35 (GHSA-36qx-fr4f-26g5) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.35 (GHSA-3g8h-86w9-wvmq) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.35 (GHSA-3x4c-7xq6-9pq8) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.35 (GHSA-4633-3j49-mh5q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.35 (GHSA-4c39-4ccg-62r3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.35 (GHSA-68g3-v927-f742) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.35 (GHSA-89xv-2m56-2m9x) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.35 (GHSA-8h8q-6873-q5fj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.35 (GHSA-955p-x3mx-jcvp) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.35 (GHSA-9g9p-9gw9-jx7f) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.35 (GHSA-c4j6-fc7j-m34r) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.35 (GHSA-ffhc-5mcf-pf4q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.35 (GHSA-ggv3-7p47-pfv8) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.35 (GHSA-gx5p-jg67-6x7h) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.35 (GHSA-h25m-26qc-wcjf) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.35 (GHSA-h64f-5h5j-jqjh) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.35 (GHSA-m99w-x7hq-7vfj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.35 (GHSA-p9j2-gv94-2wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.35 (GHSA-q4gf-8mx6-v5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.35 (GHSA-vfv6-92ff-j949) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.35 (GHSA-wfc6-r584-vfw7) dependency_analyzer · 95%
medium
Vulnerable dependency: next-auth@4.24.13 (GHSA-7rqj-j65f-68wh) dependency_analyzer · 95%
medium
Vulnerable dependency: next-auth@4.24.13 (GHSA-x445-f3h2-j279) dependency_analyzer · 95%
medium
Vulnerable dependency: next-auth@4.24.13 (GHSA-xmf8-cvqr-rfgj) dependency_analyzer · 95%
medium
Vulnerable dependency: sharp@0.33.4 (GHSA-f88m-g3jw-g9cj) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.4.38 (GHSA-6g55-p6wh-862q) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.4.38 (GHSA-fxqj-rqcc-2cmp) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.4.38 (GHSA-qx2v-qp2m-jg93) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.4.38 (GHSA-r28c-9q8g-f849) dependency_analyzer · 95%
medium
Vulnerable dependency: @ai-sdk/provider-utils@3.0.0 (GHSA-866g-f22w-33x8) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.17.1 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.17.1 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.17.1 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: @langchain/core@0.3.6 (GHSA-r399-636x-v7f6) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain@0.3.2 (GHSA-r399-636x-v7f6) dependency_analyzer · 95%
medium
Vulnerable dependency: pytest@7.4.4 (GHSA-6w46-j5rx-g56g) dependency_analyzer · 95%
medium
Vulnerable dependency: pytest@7.4.4 (PYSEC-2026-1845) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.0.1 (GHSA-mf9w-mj56-hr94) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.0.1 (PYSEC-2026-2270) dependency_analyzer · 95%
medium
Vulnerable dependency: black@24.10.0 (GHSA-3936-cmfr-pm3m) dependency_analyzer · 95%
medium
Vulnerable dependency: black@24.10.0 (PYSEC-2026-2120) dependency_analyzer · 95%
medium
Vulnerable dependency: black@24.10.0 (PYSEC-2026-2121) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain@1.0.4 (GHSA-gr75-jv2w-4656) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain@1.0.4 (PYSEC-2026-2192) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-openai@1.0.2 (GHSA-r7w7-9xr2-qq2r) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-openai@1.0.2 (PYSEC-2026-76) dependency_analyzer · 95%
medium
Vulnerable dependency: pytest@9.0.0 (GHSA-6w46-j5rx-g56g) dependency_analyzer · 95%
medium
Vulnerable dependency: pytest@9.0.0 (PYSEC-2026-1845) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.2.1 (GHSA-mf9w-mj56-hr94) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.2.1 (PYSEC-2026-2270) dependency_analyzer · 95%
medium
Vulnerable dependency: flask@3.1.2 (GHSA-68rp-wp8r-4726) dependency_analyzer · 95%
medium
Vulnerable dependency: flask@3.1.2 (PYSEC-2026-2151) dependency_analyzer · 95%
medium
Vulnerable dependency: pytest@8.4.2 (GHSA-6w46-j5rx-g56g) dependency_analyzer · 95%
medium
Vulnerable dependency: pytest@8.4.2 (PYSEC-2026-1845) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.1.1 (GHSA-mf9w-mj56-hr94) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.1.1 (PYSEC-2026-2270) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.0.0 (GHSA-mr82-8j83-vxmv) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.0.0 (PYSEC-2026-1812) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1616) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1617) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1618) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3483) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (26) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 1278 components sbom_generator · 100%
critical
Database URL with Password found in stripe-ai-1dc126b/benchmarks/saas-starter-partial-payments/run_inside_docker.sh secret_scanner · 85%
critical
Database URL with Password found in stripe-ai-1dc126b/benchmarks/saas-starter-embedded-checkout/run_inside_docker.sh secret_scanner · 85%
critical
Database URL with Password found in stripe-ai-1dc126b/benchmarks/saas-starter-partial-payments/environment/PROBLEM.md secret_scanner · 85%
high
Hardcoded Password found in stripe-ai-1dc126b/benchmarks/furever/environment/app/(dashboard)/settings/page.tsx secret_scanner · 65%
critical
Database URL with Password found in stripe-ai-1dc126b/benchmarks/saas-starter-embedded-checkout/environment/PROBLEM.md secret_scanner · 85%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%